Last updated October 16, 2026. This policy takes effect on that date.
What we collect through the request form
The request form on our Get grant help page asks for the details we need to answer you. It collects:
- your name, work email and, if you choose, a phone number;
- your organization's name and type, its state and, if you choose, its website;
- the help you need, and if you choose, the grant program;
- if you provide them, your deadline, project type, budget or amount range, registration status, awarding agency and award stage;
- if you provide them, a short description and details about an immediate award problem;
- whether the request is for an organization and your required contact consent.
The form also records the page you came from, the referring site and any campaign tags in the link you followed (UTM parameters), whether you opted into grant updates, the consent-text version, and workflow and notification status. For abuse prevention, we temporarily store a salted one-way hash of your IP address and store a salted one-way hash of your browser’s User-Agent string with an accepted inquiry. We do not store your raw IP address in the lead database.
Cloudflare Turnstile receives technical request data, including your IP address, and checks each submission to help distinguish people from bots.
Please don't send sensitive information
The form does not need sensitive data, and you should not include it. Please do not submit account credentials, banking information, Social Security numbers, personnel files or sensitive details about your facility's security. If we need security details later in an engagement, we will discuss a safer way to share them.
How we use it
We use the information to:
- respond to your request;
- decide whether we are a good fit for the work;
- provide services if you engage us;
- protect the site and the form from spam, abuse and fraud.
If you opt in separately, we will also send occasional grant updates and deadline alerts. Submitting the form does not sign you up for them. You can stop them at any time by replying to one or emailing us.
Where it is stored and who processes it
Form submissions are stored in a Cloudflare D1 database. Each submission also sends an email notification to Bedrock through Resend, a transactional email provider.
These service providers process data for us:
- Cloudflare, for website hosting, request processing, Turnstile bot checks, the database and web analytics;
- Resend, for email delivery;
- Google Workspace, for our business email.
Sharing and sale
We do not sell personal information. We do not currently share form submissions with outside consultants or partners. If we ever want to share an inquiry with an independent consultant, we will ask for your separate consent first.
Analytics
We use Cloudflare Web Analytics to count visits in aggregate. It does not use cookies to track you. We do not use advertising pixels.
How long we keep it
- Honeypot submissions and rejected form contents are not saved in the lead database. Salted IP rate-limit counters are removed after about 24 hours when the form next processes a rate-limit check.
- Accepted inquiries in the lead database receive a deletion date 730 days after submission. Deletion is performed through a periodic manual purge; it is not automatic.
- Email notifications and provider-side request records may remain in Resend, Google Workspace or Cloudflare under our account settings and those providers’ retention practices.
- Client records are kept for as long as the engagement and our legal, tax and grant record-retention obligations require.
Your choices and requests
To see, correct or delete the information we hold about you, email info@bedrockgrants.com. We will confirm your identity before we act, so we don't release or change someone else's information.
Some states give their residents rights to access, correct and delete personal information, and to opt out of certain uses of it. If one of those laws applies to you, use the same email address to make a request. We will not treat you differently for exercising a privacy right.
Children
Our services are for organizations. The site is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, email us and we will delete it.
Security
We use reasonable measures to protect the information we hold. No website, database or email system is completely secure, so we cannot guarantee security.
Changes to this policy
If we make a material change, we will post the new policy on this page with a new date. The date at the top shows the current version.
Contact
Bedrock Grants LLC, Florida. Email info@bedrockgrants.com. Our terms of use cover the rest of the site.